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Method and Agent for Managing Profile Information 

Field of the Invention 
5 This invention relates to a method of managing profile information, an 

agent for managing profile information and a module for managing profile 
information, particularly but not exclusively for supplying information to a 
remote profile database over the Intemet. 
Background of the Invention 

10 To obtain access to services, particularly where offered over the 

Intemet, it is generally required for a user to supply personal information. This 
information may include such details as the user's name, address and other 
contact details, financial information and in many cases personal preference 
information, such a user's likes and dislikes. This information may be used by 

15 a company or other organisation providing a service to identify a user, 
personalise the service offered to that user and charge the user for the service if 
required. 

When a user wishes to access several different services, it has often 
been necessary to supply personal information to each individual service. This 

20 requires the user to supply the same data several times, and may lead to 
problems in updating all copies of information when required. To overcome 
these difficulties, it is known to provide remote profile systems, which store 
remote profile databases holding the user information described above. This 
information is then made available to other appropriately validated and 

25 authorised systems or services, so that a user does not have to repeatedly supply 
the same information or provide appropriate authorisation to different services 
during a single session. Such remote profile systems are, for example, AOL 
MagicCarpet, Microsoft Passport or the proposed Liberty Alliance system. 
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A source of concern is actually that the personal information stored on 
a remote profile database is vulnerable to unauthorised, or even perhaps 
authorised but undesirable use, such as unauthorised access to the site, data 
mining techniques or other leaks of information. 

5 An aim of the present invention is to provide a new or improved 

method of managing profile information. 
Summary of the Invention 

According to a first aspect of the invention, we provide a method of 
managing profile information comprising the steps of supplying dummy 

10 information to a remote profile database, accessing a service operable to request 
profile information fi"om the remote profile database and supplying correct 
information to the remote profile database, and, after accessing the service, 
supplying dummy information to the remote profile database. 

The method may comprise the step of detecting a service request and 

15 generating an update request to send correct information to the remote profile 
database. 

The method may comprise the step of supplying the correct information 
to the remote profile database in response to the update request. 

The method may comprise the step of detecting the end of tiie service 
20 access and generating a dummy information update request. 

The method may comprise the step of supplying dummy information to 
the remote profile database in response to the dummy information update 
request. 

The method may comprise the step of storing correct information in a 

25 local database. 

According to a second aspect of the invention, we provide an agent for 
managing profile information, the agent being operable to supply dummy 
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information to a remote profile database and to supply correct information to a 
remote profile database. 

The agent may be operable to supply correct information to a remote 
profile database in response to an update request. 
5 The agent may be operable to supply dummy information to a remote 

profile database in response to a dummy information update request. 

The update request and/or the dummy information update request may 
be generated by a user. 

The update request and/or the dummy information update request may 
10 be generated in response to a service access. 

The agent may be operable to display the status of the information 
supplied to the remote profile database to a user. 

The agent may be operable to read a local database to obtain the correct 
information and supply the correct information to a remote profile database. 
15 According to a third aspect of the invention, we provide a computer, the 

computer being operable to access a service via the Internet, the computer 
being provided with an agent according to the second aspect of the invention. 

According to a fourth aspect of the invention, we provide a module for 
managing profile mformation, the module being operable to detect a service 
20 request indication and generate an update request to provide correct information 
to a remote profile database. 

The module may be operable to transmit the update request to an agent 
provided on a user's computer. 

The service request indication may comprise a service request 
25 transmitted to a service. 

The service request information may comprise a request transmitted 
fi-om a server to the remote profile database. 
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According to a fiflth aspect of the invention, we provide a proxy server, 
the server being operable to communicate with a user's computer and the 
Internet, the server being provided with a module. 

According to a sixth aspect of the invention, we provide a system 
5 comprising a computer according to the third aspect of the invention and a 
proxy server according to the fifth aspect of the invention. 

Brief Description of the Drawings 

Embodiments of the present invention will now be described by way of 
10 example only with reference to the accompanying drawings wherein; 

Figure 1 is diagrammatic illustration of a system embodying the present 
invention, 

Figure 2 is a sequence diagram showing a method of managing profile 
information on the system of Figure 1 and embodying the present invention, 
15 Figure 3 is a diagrammatic illustration of a further system embodying 

the present invention, 

Figure 4 is a sequence diagram showing a mefliod of handling profile 
information for the system of Figure 3 and embodying the present invention, 
and 

20 Figure 5 is a sequence diagram illustrating a fiirther method embodying 

the present invention. 

Detailed Description of the Preferred Embodiments 

Referring now to Figure 1, a user's computer such as a personal 
computer is shown at 10. A remote profile system is shown at 11 which is 
25 connected to a remote profile database 12, and a service provider system is 
shown at 13. The computer 10, the remote profile database 12 and the profile 
system 13 are all able to communicate via the Internet 14. 
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The computer 10 is provided with a browser shown at 15, an agent as 
shown at 16 and a local data storage medium, for example a hard disk drive, on 
shown at 17 on which is stored a correct set of profile information relating to a 
user of the computer 10. 
5 When it is not desired to make use of a service, the profile information 

supphed to the remote profile system 11 and held on the remote profile 
database 12 is generally made incorrect or "obfiiscated". The data may be for 
example random strings of characters, or aliases referring to the correct data in 
the correct data information, or wrong but seemingly correct data indicating or 

10 corresponding to the remote profile system. In the latter case, if a data leak 
becomes apparent, it will be clear whether or not the remote profile system 1 1 
is tiie source. In this specification, all incorrect profile information however 
generated or encoded will be referred to as "dummy data". 

Referring now to Figure 2, the method is performed as follows. At step 

15 20, the transmission of dummy data fi-om the user's computer 10 to the remote 
profile system 1 1 is indicated. Since the remote profile system 1 1 must permit 
users to access and change their own data, for data to be updated by the user, 
the user of the computer 10 can do this as of right. 

At step 21, a user of the computer 10 wishes to begin a session where he 

20 accesses the service provided by the service system 13. At step 22, the correct 
data is read fi'om the local data storage medium 17 and transmitted to the 
remote profile system 11 where it is stored on the remote profile database 12, 
The user tiien transmits a service request 23 to the service system 13, for 
example by using the browser 15 to access a website hosted by the service 

25 system 13. At step 24 the service system 13 will contact the remote profile 
system 11 to retrieve profile information corresponding to the user of the 
computer 10 and at step 25 this, currently correct, data is read fi-om the remote 
profile database 12 and returned to the service system 13. The service will 
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transmit an appropriate response or result to the user computer 10, At the end 
of the session, the user of the computer 10 will once again transmit dummy data 
to the remote profile system 1 1 to be stored in the remote profile database 12. 
The steps 20, 22, 27 transmitting dummy data or correct profile 
5 information as appropriate may be done manually, that is by a user, by for 
example accessing a website to pass the information to the remote profile 
system 11. However, such steps may preferably be handled by an agent 16 
which stores an address of the remote profile system 11 and which is operable 
to transmit correct or dummy data to the remote profile system 11. In an 

10 example display shown at 30 in Figure la the agent 16 may generate a display 
showing at 31 the status of the data held on the remote profile system 11, a 
button 32 which the user may click on to update the data on the remote profile 
server 1 1, and a check box 33 to select whether correct or dummy data is sent. 
Thus, at steps 20, 22 and 27, the steps of transmitting correct or dummy data to 

15 the profile system may be performed by the agent 16 in response the user 
generating an update request to send correct information or a dummy update 
request to send dummy data by clicking on the button 32 of the display 30. A 
button 32 or display 30 may be associated with an individual item of data or a 
group of data, or may be associated with all the information held on one profile 

20 system or a plurality of remote profile systems. 

It might alternatively be envisaged that the transmission of correct 
information or dummy data to the remote profile system 11 is performed 
automatically in response to a service request indication, that is some indication 
or event showing that the user of the user computer 10 is attempting to access a 

25 service provided by a service system which is operable to retrieve profile 
information firom the remote profile system 1 1 . 

In an embodiment of the invention described with reference to Figures 3 
and 4, this automatic detection of attempts to access a service is performed by a 
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proxy server. As shown in Figure 3, the system is the same as that of Figure 1 
except that the computer 10 accesses the Intemet 14 via a proxy server 18 
provided with a module for managing profile information shown at 19. Such 
proxy servers are known wherein when a user's access to the Intemet 14 is 
5 routed via a proxy server which may perform filtering, monitoring or 
personalisation roles. 

In the embodiments of Figures 3 and Figure 4, the module 19 is operable 
to detect a service request indication in the form of a service request generated 
by the computer 10 to be transmitted to the service system 13. 

10 Referring to Figure 4, as in the method of Figure 2, the user transmits 

dummy data to the remote profile system 1 1, for example by using an agent 16 
as described hereinbefore. At step 41 the user begins a session in which he 
wishes to access the service provided by the service system 13. At step 42, a 
service request is generated, for example by a user of the computer 10 using the 

15 browser 15 to access a website hosted by the service system 13. The service 
request is passed to the proxy server 18 in conventional manner, which detects 
the service request and transmits an update request 43 to the user's computer 
10. This update request is received by the agent 16, which at step 44 transmits 
the correct data to the remote profile system 11, and when this is complete 

20 transmits an update complete report 45 to the proxy server 18. The proxy 
server 18 then forwards the service request to the service system 13 at step 46. 
As in Figure 2, the service system 13 transmits a request for profile information 
shown at step 47 to the remote profile system 11 and this information is 
returned at step 48. The service system then retums a result at step 49 to the 

25 proxy server 18 which forwards the result at step 50 to the user computer 10. 
As part of the result 50, the proxy server may transmit a dummy information 
update request which is detected by the agent 16 and at step 51 the dunmiy data 
is transmitted to the remote profile system 1 1 . Alternatively, it will be apparent 
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that the step of transihitting dummy data to the remote profile system may be 
performed by the agent 16 detecting the returned result at step 50, or by the user 
instructing the agent 16 to transmit dunmiy data as discussed hereinbefore, for 
example by means of a display such as that shown in Figure la. 
5 In this embodiment, the correct profile information might alternatively 

be stored on the proxy server 18 and the step of transmitting correct or dummy 
data to the remote profile system 1 1 may be performed by an agent located on 
the proxy server 18. The advantage of maintaining the profile information on 
the user computer 10 however is that the profile information is stored locally 

1 0 and under the control of the user. 

A further method embodying the present invention is illustrated by the 
sequence diagram of Figure 5. In this alternative, the communications between 
the service system 13 and the remote profile system 11 are passed through a 
proxy 18' which is operable to detect a service request indication in the form of 

15 a request fi"om the service system to the remote profile system for profile 
information, generally but not necessarily always as a result of a service request 
generated by the user's computer 10. In the method of Figure 5, at 60 as in the 
diagrams of Figures 2 and 4, dummy information is transmitted to the remote 
profile system, for example by manual or automatic operation of an agent 16 as 

20 discussed hereinbefore. At 61, a session in which the user computer 10 
attempts to contact the service system 13 begins, and at step 62 a service 
request is transmitted to the service system 13. The service system 13 transmits 
a profile request at step 63 directed to the remote profile system 1 1 . The profile 
request is received by the proxy 18' and is identified by the proxy 18' as a 

25 service request indication. At step 63, the proxy 18' generates an update 
request to the user computer 10 and at step 64 correct that data is transmitted to 
the remote profile system 1 1 in response to the update request, for example 
through automatic detection of the update request by an agent 16, or by a user 
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manually instructing the agent 16 to perform the update. When the correct 
information has been passed to the remote profile system 11 as shown at 65, a 
confirmation is transmitted to the proxy 18' at step 66, which at step 67 passes 
the profile information request to the remote profile system 11. At step 68 the 
5 profile information is transmitted firom the remote profile system to the service 
system 13, and at step 69 the results of the service are transmitted to the user 
computer 10. At step 70, on completion of the session, dunmiy data is once 
again transmitted to the remote profile system 11, for example as a result of 
automatic detection of the end of the session by the agent 16, or in a response to 

10 a dummy information update request generated by the proxy 18, or by the user 
instructing the agent 16 to perform the update. 

It will be apparent that any update policy may be used as desired. 
Although in the examples discussed hereinbefore the remote profile system is 
updated with correct data only for the duration of a session and then the correct 

15 data is replaced with dummy data, it might be envisaged that other update 
policies might be used. For example, correct information and dummy data 
might be updated at random intervals, and different dummy data sets might be 
used. In this manner, it is rendered more difficult for any tracker or data 
monitor to distinguish correct and diramiy data. To fiulher obscure the 

20 difference between dummy and correct information, it might be envisaged that 
updates are associated with fake service calls. 

Thus, in accordance with the present invention, personal profile 
information held on a remote profile server is obscured or blurred. Although 
the present invention will not defeat all attempts to gain unauthorised access to 

25 or use of personal details stored in the profile information, it will help reduce 
the risk of personal data being made available or used in an unauthorised 
manner or otherwise undesirable and will obscure the validity of any data 
which is released or accessed in such a manner. 
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In the present specification "comprises" means "includes or 
consists of* and "comprising" means "including or consisting of*. 

The features disclosed in the foregoing description, or the following 
claims, or the accompanying drawings, expressed in their specific forms or in 
5 terms of a means for performing the disclosed function, or a method or process 
for attaining the disclosed result, as appropriate, may, separately, or in any 
combination of such features, be utilised for reaUsing the invention in diverse 
forms thereof 

10 
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